Unsafe permissions set on a file JS-D017

Setting unsafe POSIX file permissions can be insecure and can lead to unintended access to files.

In Unix, the "others" class refers to all users except the owner of the file and the members of the group assigned to this file. Granting permissions to this group of users can lead to unintended access to files.

Bad Practice

const fs = require('fs');
const process = require('process');

fs.chmodSync("/tmp/fs", 0o777); // Sensitive
  // ...
})
process.umask(0o777); // Sensitive

Recommended

const fs = require('fs');
const process = require('process');

fs.chmodSync("/tmp/fs", 0o770); // Compliant
  // ...
})
process.umask(0o770); // Compliant

References

• OWASP A01:2021 - Broken Access Control
• Porous Defenses
• Incorrect Permission Assignment for Critical Resource
• Incorrect Privilege Assignment